5 ms·

They have the best privacy policy ever: https://localsend.org/#/privacy https://localsend.org/#/privacy

by LorenzoGood 3y ago

tjoff 3y ago
Doesn't say anything about what they share other than that they don't collect personal data...
- fddrdplktrew 3y ago
  I guess they send it straight to the spying agencies from your personal computing device...
- Brian_K_White 3y ago
  Yes they do? There's only a few lines in the entire thing, so I don't know how you can miss that twice they say they don't collect anything in the first place, and then they say: "Since we do not collect such information, there's no possibility of us using, sharing, or selling this data." If you want to say that this technically isn't a declaration, I would simply disagree and count it as one. Frankly, being an open source app, I would be fine if it even said something like "It's open source. If you think it does anything nefarious, go ahead and show it." without even a suggestion of a promise. But they actually do make a declaration of both intent and action. Any other data that isn't personal data they might have, like their download estimates or something, is theirs none of our business.
  - tjoff 3y ago
    What? Collect anything? They say they don't collect personal data. They don't mention what they do with non-personal data. >Frankly, being an open source app, I would be fine if it even said something like "It's open source. If you think it does anything nefarious, go ahead and show it." without even a suggestion of a promise. But they actually do make a declaration of both intent and action. That is just horrendous. No. That is not a bar that is acceptable for any app, free, paid, open source or not. Likely illegal too. > Any other data that isn't personal data they might have, like their download estimates or something, is theirs none of our business. Or something... such as information about files being sent... Or app telemetry etc. That was my point. I don't have reason to distrust them, but calling it the best "privacy policy ever" is a huge stretch given what it lacks.
    - xeyownt 3y ago
      What would be non-personal data in this case?
      - tjoff 3y ago
        ? > "Or something... such as information about files being sent... Or app telemetry etc." Information about files being sent could be anything from metadata, checksums, to something like (but not likely) CSAM. Could also be data about your device(s), anything really.
        Brian_K_White 3y ago
        But what though? Do you have an example of any such thing? Github makes it effortless to link righ to a specific line of code in a file. Show us a single one of these anythings.
        tjoff 3y ago
        There must be a disconnect here. We are talking about the privacy policy. Nothing else. The policy says that they don't collect, store, or process any personal data. That is great! What is not great is that the policy does not discuss whether or what type of other non-personal data is collected/stored/processed. That makes it a bad privacy policy. That is what I commented on.
        2024throwaway 3y ago
        Could you explain in what way sharing non-personal data could violate someone's privacy? You mention earlier data about your devices, this seems to me like it would fall into the `personal data` category, and be excluded.
        Brian_K_White 3y ago
        This is like saying that their data & privacy statement doesn't explain the contents of their office refrigerator. There sure is a disconnect. What exactly is not great? What's missing? I see only 2 possible arguments here and neither one seems to actually exist, but you tell me what I'm missing. One possibility is there is some data that the statement doesn't cover. Let's see... The statement says they don't posess anything at all. And since the statement is so short, there is no possibility to hide any technicalities in confusing fine print. So, what data isn't included in "we don't have anything"? What is something the statement says or fails to say? All I see is farcical things like "aha! but it doesn't say what they are going to do with my email!" 1, yes it does, 2, what email? The other possibility is the statement is a lie because the code sends them data. Does it?
  - deleted 3y ago
    [deleted]
dolmen 3y ago
But they also have Terms of Service (https://localsend.org/#/terms-of-service https://localsend.org/#/terms-of-service) which are not so great: You represent that you are over the age of 18. The Company does not permit those under 18 to use the Service. I planned to use it with family (kids).
- rchaud 3y ago
  That line is probably in there to indemnify against the risk of kids being kids and sending each other illegal material.
remram 3y ago
> We may update our Privacy Policy from time to time. Thus, you are advised to review this page periodically for any changes. We will notify you of any changes by posting the new Privacy Policy on this page. These changes are effective immediately after they are posted on this page. This actually seems really awful?

They have the best privacy policy ever: https://localsend.org/#/privacy https://localsend.org/#/privacy

tjoff 3y ago

Doesn't say anything about what they share other than that they don't collect personal data...

fddrdplktrew 3y ago
I guess they send it straight to the spying agencies from your personal computing device...
Brian_K_White 3y ago
Yes they do? There's only a few lines in the entire thing, so I don't know how you can miss that twice they say they don't collect anything in the first place, and then they say: "Since we do not collect such information, there's no possibility of us using, sharing, or selling this data." If you want to say that this technically isn't a declaration, I would simply disagree and count it as one. Frankly, being an open source app, I would be fine if it even said something like "It's open source. If you think it does anything nefarious, go ahead and show it." without even a suggestion of a promise. But they actually do make a declaration of both intent and action. Any other data that isn't personal data they might have, like their download estimates or something, is theirs none of our business.
- tjoff 3y ago
  What? Collect anything? They say they don't collect personal data. They don't mention what they do with non-personal data. >Frankly, being an open source app, I would be fine if it even said something like "It's open source. If you think it does anything nefarious, go ahead and show it." without even a suggestion of a promise. But they actually do make a declaration of both intent and action. That is just horrendous. No. That is not a bar that is acceptable for any app, free, paid, open source or not. Likely illegal too. > Any other data that isn't personal data they might have, like their download estimates or something, is theirs none of our business. Or something... such as information about files being sent... Or app telemetry etc. That was my point. I don't have reason to distrust them, but calling it the best "privacy policy ever" is a huge stretch given what it lacks.
  - xeyownt 3y ago
    What would be non-personal data in this case?
    - tjoff 3y ago
      ? > "Or something... such as information about files being sent... Or app telemetry etc." Information about files being sent could be anything from metadata, checksums, to something like (but not likely) CSAM. Could also be data about your device(s), anything really.
      - Brian_K_White 3y ago
        But what though? Do you have an example of any such thing? Github makes it effortless to link righ to a specific line of code in a file. Show us a single one of these anythings.
        tjoff 3y ago
        There must be a disconnect here. We are talking about the privacy policy. Nothing else. The policy says that they don't collect, store, or process any personal data. That is great! What is not great is that the policy does not discuss whether or what type of other non-personal data is collected/stored/processed. That makes it a bad privacy policy. That is what I commented on.
        2024throwaway 3y ago
        Could you explain in what way sharing non-personal data could violate someone's privacy? You mention earlier data about your devices, this seems to me like it would fall into the `personal data` category, and be excluded.
        Brian_K_White 3y ago
        This is like saying that their data & privacy statement doesn't explain the contents of their office refrigerator. There sure is a disconnect. What exactly is not great? What's missing? I see only 2 possible arguments here and neither one seems to actually exist, but you tell me what I'm missing. One possibility is there is some data that the statement doesn't cover. Let's see... The statement says they don't posess anything at all. And since the statement is so short, there is no possibility to hide any technicalities in confusing fine print. So, what data isn't included in "we don't have anything"? What is something the statement says or fails to say? All I see is farcical things like "aha! but it doesn't say what they are going to do with my email!" 1, yes it does, 2, what email? The other possibility is the statement is a lie because the code sends them data. Does it?
- deleted 3y ago
  [deleted]

dolmen 3y ago

But they also have Terms of Service (https://localsend.org/#/terms-of-service https://localsend.org/#/terms-of-service) which are not so great: You represent that you are over the age of 18. The Company does not permit those under 18 to use the Service. I planned to use it with family (kids).

rchaud 3y ago
That line is probably in there to indemnify against the risk of kids being kids and sending each other illegal material.

remram 3y ago

> We may update our Privacy Policy from time to time. Thus, you are advised to review this page periodically for any changes. We will notify you of any changes by posting the new Privacy Policy on this page. These changes are effective immediately after they are posted on this page. This actually seems really awful?